Added regex filter for institutional groups within LDAP subclass (thought: might be better to exclude, rather than naming inclusions)